2692 matches found
[oss-security] LMS-2014-07-07-1: python-lz4
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello All, Please find the bug report for python-lz4 attached below. Steeve Morin @steeve, the maintainer of the python-lz4 package, has been great to work with. He worked quickly to get the package up to date by this morning. Thanks, Don A. Bailey...
PHP 5.4.0RC6 64bit Denial of Service
No description provided by source. ?php / This script generates a POST header that makes PHP 5.4.0RC6 64 bit try to execute code at 0x1111111111111111 C Copyright 2012 Stefan Esser PHP 5.3.9 requires you to know the address of a writable address filled with NULL. 32bit requires you to create a fa...
Interspire TrackPoint NX Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16214/info TrackPoint NX is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
ActiveKB NX 2.6 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26027/info ActiveKB NX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Samba SetInformationPolicy AuditEventsInfo Heap Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Microsoft DNS RPC Service extractQuotedChar() Overflow (TCP)
No description provided by source. $Id: ms07029msdnszonename.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
HT Editor 2.0.20 Buffer Overflow (ROP PoC)
No description provided by source. !/usr/bin/perl =head1 TITLE HT Editor 2.0.20 Buffer Overflow ROP PoC =head2 DESCRIPTION Since version 2.0.18, the stack overflow vulnerability has not been corrected, which I assume would make it 0day? I consequently recoded an exploit, as memory addresses have...
Rhinosoft Serv-U Session Cookie Buffer Overflow
No description provided by source. $Id: servusessioncookie.rb 8762 2010-03-10 05:58:01Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
mcrypt <= 2.5.8 Stack Based Overflow
No description provided by source. !/usr/bin/perl Title : mcrypt = 2.5.8 STACK based overflow Date : 23/11/2012 Exploit Author : Tosh CVE : CVE-2012-4409 Patch : http://www.openwall.com/lists/oss-security/2012/09/06/8 Tested on : Archlinux 3.6.6-1, without SSP This script exploit a stack based...
Microsoft Server Service Relative Path Stack Corruption
No description provided by source. $Id: ms08067netapi.rb 11614 2011-01-21 04:09:48Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Microsoft DNS RPC Service extractQuotedChar() Overflow (SMB)
No description provided by source. $Id: ms07029msdnszonename.rb 10503 2010-09-28 15:23:14Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
VideoLAN VLC MKV Memory Corruption
No description provided by source. $Id: vlcwebm.rb 11725 2011-02-08 18:22:36Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Python socket.recvfrom_into() - Remote Buffer Overflow
No description provided by source. !/usr/bin/env python ''' Exploit Title: python socket.recvfrominto remote buffer overflow Date: 21/02/2014 Exploit Author: @sha0coder Vendor Homepage: python.org Version: python2.7 and python3 Tested on: linux 32bit + python2.7 CVE : CVE-2014-1912...
CVE-2014-3295
The HSRP implementation in Cisco NX-OS 6.22a and earlier allows remote attackers to bypass authentication and cause a denial of service group-member state modification and traffic blackholing via malformed HSRP packets, aka Bug ID CSCup11309...
Authentication flaw
The HSRP implementation in Cisco NX-OS 6.22a and earlier allows remote attackers to bypass authentication and cause a denial of service group-member state modification and traffic blackholing via malformed HSRP packets, aka Bug ID CSCup11309...
CVE-2014-3295
CVE-2014-3295 affects Cisco NX-OS HSRP authentication: malformed HSRP packets can bypass authentication and cause DoS by manipulating group-member states and traffic blackholing on Cisco NX-OS versions 6.2(2a) and earlier. Connected sources confirm the issue in the HSRP parsing logic (Bug CSCup11...
CVE-2014-3295
The HSRP implementation in Cisco NX-OS 6.22a and earlier allows remote attackers to bypass authentication and cause a denial of service group-member state modification and traffic blackholing via malformed HSRP packets, aka Bug ID CSCup11309...
Cisco NX-OS multiple security vulnerabilities
Privilege escalation, buffer overflow, DoS...
Cisco NX-OS Multiple Vulnerabilities (cisco-sa-20140521-nxos)
According to its self-reported version, the remote NX-OS device is reportedly affected by one or more of the following vulnerabilities : - A privilege escalation flaw exists on systems with multiple virtual device contexts VDCs and local authentication configured. This could allow a remote,...
CVE-2014-3261
Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.41i, NX-OS 5.0 before 5.03U22 on Nexus 3000 devices, NX-OS 4.1 before 4.12E11l on Nexus 4000 devices, NX-OS 5.x before 5.13N11 on Nexus 5000 devices, NX-OS 5...